CN110462534A - Control device, control method and program - Google Patents
Control device, control method and program Download PDFInfo
- Publication number
- CN110462534A CN110462534A CN201880020702.2A CN201880020702A CN110462534A CN 110462534 A CN110462534 A CN 110462534A CN 201880020702 A CN201880020702 A CN 201880020702A CN 110462534 A CN110462534 A CN 110462534A
- Authority
- CN
- China
- Prior art keywords
- module
- input
- output module
- state
- control
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
Classifications
-
- G—PHYSICS
- G05—CONTROLLING; REGULATING
- G05B—CONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
- G05B19/00—Programme-control systems
- G05B19/02—Programme-control systems electric
- G05B19/04—Programme control other than numerical control, i.e. in sequence controllers or logic controllers
- G05B19/042—Programme control other than numerical control, i.e. in sequence controllers or logic controllers using digital processors
- G05B19/0428—Safety, monitoring
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F1/00—Details not covered by groups G06F3/00 - G06F13/00 and G06F21/00
- G06F1/26—Power supply means, e.g. regulation thereof
- G06F1/32—Means for saving power
- G06F1/3203—Power management, i.e. event-based initiation of a power-saving mode
- G06F1/3206—Monitoring of events, devices or parameters that trigger a change in power modality
-
- G—PHYSICS
- G05—CONTROLLING; REGULATING
- G05B—CONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
- G05B19/00—Programme-control systems
- G05B19/02—Programme-control systems electric
- G05B19/04—Programme control other than numerical control, i.e. in sequence controllers or logic controllers
- G05B19/045—Programme control other than numerical control, i.e. in sequence controllers or logic controllers using logic state machines, consisting only of a memory or a programmable logic device containing the logic for the controlled machine and in which the state of its outputs is dependent on the state of its inputs or part of its own output states, e.g. binary decision controllers, finite state controllers
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F1/00—Details not covered by groups G06F3/00 - G06F13/00 and G06F21/00
- G06F1/26—Power supply means, e.g. regulation thereof
- G06F1/32—Means for saving power
- G06F1/3203—Power management, i.e. event-based initiation of a power-saving mode
- G06F1/3234—Power saving characterised by the action undertaken
- G06F1/325—Power saving in peripheral device
- G06F1/3278—Power saving in modem or I/O interface
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F1/00—Details not covered by groups G06F3/00 - G06F13/00 and G06F21/00
- G06F1/26—Power supply means, e.g. regulation thereof
- G06F1/32—Means for saving power
- G06F1/3203—Power management, i.e. event-based initiation of a power-saving mode
- G06F1/3234—Power saving characterised by the action undertaken
- G06F1/3287—Power saving characterised by the action undertaken by switching off individual functional units in the computer system
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F9/00—Arrangements for program control, e.g. control units
- G06F9/06—Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
- G06F9/44—Arrangements for executing specific programs
- G06F9/4401—Bootstrapping
- G06F9/4418—Suspend and resume; Hibernate and awake
Landscapes
- Engineering & Computer Science (AREA)
- Theoretical Computer Science (AREA)
- Physics & Mathematics (AREA)
- General Physics & Mathematics (AREA)
- General Engineering & Computer Science (AREA)
- Software Systems (AREA)
- Automation & Control Theory (AREA)
- Computer Security & Cryptography (AREA)
- Computer Hardware Design (AREA)
- Computing Systems (AREA)
- Safety Devices In Control Systems (AREA)
- Programmable Controllers (AREA)
Abstract
The present invention provides a kind of control device, characterized by comprising: the storage unit of storage operational administrative information；Application execution unit sends the signal for closing the power supply of field instrumentation；Reset unit, is based on the signal, and instruction pause is powered from input/output module；And activation unit, it indicating to continue to power from input/output module based on have passed through preset time, should suspend in the preset time and powering from input/output module.
Description
Related application
The content of following Japanese patent application is incorporated herein by reference: No. 2017-086225 submitted on April 25th, 2017.
Technical field
The present invention relates to a kind of control device more particularly to a kind of control devices, control method and program, for inhibiting safe instrument
The switching of redundant input/output module slave mode (operation/waiting) in F&G (fire is gentle) system of device system.
Background technique
In general, in carrying out oil refining or petrochemistry processing, the factory for the water treatment procedure or other processing of water and sewage,
Process Control System to control the status function in such as industrial process (such as: pressure, temperature or flow velocity) includes such as dividing
The security systems such as cloth control system (DCS) dispatch control system and safety instrumented systems (SIS), so as to ensure it is safe
Advanced control is carried out simultaneously.
In dcs as described above: field instrumentations such as flowmeter and transmitter and for controlling live instrument
The control device of device passes through network connection；It is acquired by the measurement data that field instrumentation measurement obtains by control device；Control
Device controls field instrumentation according to measurement data collected.To control various status functions by system.
In safety instrumented systems as described above, the field instrumentation for sense gasses, flame, heat, smog etc. is provided,
It is sounded an alarm according to the sensing result of field instrumentation.By being stopped according to the urgency level of such alarm in certain safe shape
The operation of factory under state, system attempt to prevent from may cause injury or dead and environmental pollution thing before actually occurring
Therefore and protect the facility of factory.
For example, non-patent literature 1 discloses the topology example of control device used in safety instrumented systems.
Patent document 1 discloses a kind of technology, at the power supply of the field instrumentation in safety instrumented systems execute ON/OFF control with
Cancel the alarm issued from field instrumentation.
Non-patent literature
[non-patent literature 1] Yasuhiko Yamashiro, " Hardware Features of the ProSafe-RS ",
Yokogawa Technical Reprots, Yokogawa Electric Corporation (makes tranquil a man of virtue and ability, " ProSafe-RS in mountain city
Hardware characteristics ", Yokogawa Motor technical report, Yokogawa Motor company), on October 30th, 2005, Vol.49No.4 (2005)
p.155-158
Patent document
[patent document 1] Japanese patent application discloses No.2017-059115
Summary of the invention
Problems to be solved by the invention:
Fig. 1 shows the topology example of the control device 1 used in conventional security instrument system.Control device 1 is via such as
The control network 7 such as Vnet/IP (registered trademark) is connect with human interface station 5 and engineering terminal 6.In Fig. 1, control device 1 by
Following part is constituted: security control unit, by power module 141/142, processor module 131/132, input/output module
The live instrument that 111-116 (hereinafter referred to as I/O module), communication bus module 121/122 are connected with by I/O module 111-116
Device 4 is constituted；First security node unit, by power module 231/232, I/O module 211-218, communication bus module 221/222
The field instrumentation (not shown) connected with by I/O module 211-218 is constituted；Second security node unit, by power module
331/332, the field instrumentation that I/O module 311-318, communication bus module 321/322 are connected with by I/O module 311-318
(not shown) is constituted.These power modules 141/142,231/232 and 331/332, processor module 131/132, I/O module
Modules in 111-116,211-218 and 311-318 and communication bus module 121/122,221/222 and 321/322
It can have redundancy structure, two modules form a pair of of module, and a module is in state of a control (control side) and another mould
Block is in standby (to pusher side).
Processor module 131/132, I/O mould of the power module 141/142,231/232 and 331/332 to composition control device 1
Block 111-116,211-218 and 311-318 and communication bus module 121/122,221/222 and 321/322 are powered.
Processor module 131/132 is connect with control network 7, is obtained via I/O module 111-116,211-218 and 311-318
The measured value of field instrumentation 4, and execute the calculation process of the control parameter for calculating control factory.
Communication bus module 121/122 is connect via communication bus with other communication bus modules 221,222,321 and 322, with
Extension includes the control device 1 of I/O module 211-218,311-318.
I/O module 111-116,211-218 and 311-318 is connect with field instrumentation 4, will enter into field instrumentation 4 or from scene
The signal that instrument 4 exports is converted into the format of the calculation process for calculating the control parameter for controlling factory, which can be with
It is executed at processor module 131/132.In addition, it is sent to processor module 131/132 by converting signal obtained,
To execute the calculation process of the control parameter for calculating control factory.
In addition, I/O module 111-116,211-218 and 311-318 powers at field instrumentation 4 connected to it, to operate
Field instrumentation 4.Here, if redundancy I/O module is the power supply of field instrumentation 4, a mould in state of a control (control side)
Block is powered.At this point, another module being in standby (to pusher side) waits while connecting with field instrumentation 4, with
Just it such as when a module becomes unable to power supply as failure, (is controlled instead of what is be powered in state of a control
Side processed) in a module be powered.
If from the module in state of a control (control side) and can be in standby by redundancy I/O module for power supply
The both sides of the module of (to pusher side) are powered.
Here, if detecting the measured value more than predetermined threshold, I/O module 111-116,211-218 and 311- are connected to
318 field instrumentation 4 sounds an alarm.Once measured value is more than threshold value, even if measured value falls below threshold value, field instrumentation again
4 can also continuously send out alarm.This is because the operator of factory, surfaceman etc. must be notified, detected by field instrumentation 4
Danger/exception of factory.The power supply of temporary close field instrumentation 4 is needed, issues state to cancel the alarm of field instrumentation 4.In
Hereinafter, pause is powered by I/O module 111-116,211-218 and 311-318 to field instrumentation 4, is then further continued for powering
(then i.e. power supply is closed opens again), to cancel the alarm sending state of field instrumentation 4 and it to be made to be restored to normal condition (not
The state sounded an alarm), which is referred to as RESET operation.
If resetting field instrumentation 4, control device 1 passes through I/O module 111-116,211- that connect with field instrumentation 4
218 and 311-318 controls the power supply to field instrumentation 4.
When receiving the instruction for resetting field instrumentation 4 from control device 1, redundancy I/O module 111-112 passes through control device
(not shown) makes I/O module 111-112 be transformed into uncontrolled state from slave mode, and suspends and power to field instrumentation 4.This
In, uncontrolled state refers to control device 1 not and can control the state (off-line state) of redundancy I/O module 111-112.Another party
Face, control device 1 can control redundancy I/O module 111-112 so that one of module enter state of a control (control side) and
The state that another module enters standby mode (to pusher side) is referred to as slave mode (presence).
After a preset time lapses, I/O module 111-112 continues to supply field instrumentation 4 according to the instruction for carrying out self-control device 1
Electricity, with restoring scene instrument 4.
Here, if redundancy I/O module 111-112 will suspend and continue to power to field instrumentation 4, I/O module can be switched
The state of a control (control side) and standby mode of 111-112 (to pusher side).For example, resetting operation if executed, restore I/O mould
The slave mode (operation/waiting) of block 111-112, and by making to be in standby the I/O mould (to pusher side) before reset
Block 111 be in state of a control (control side) and make before reset in the I/O module 112 of state of a control (control side) be in
Machine state (to pusher side) is powered to field instrumentation 4.
That is, the state of a control (control side) or standby mode (to pusher side) of each I/O module 111-112 are resetting respectively
Standby mode (to pusher side) or state of a control (control side) are switched to before and after operation, field instrumentation 4 receives power supply.
For example, by taking the I/O module of Fig. 1 as an example, it is assumed here that executed to the field instrumentation for being connected to redundancy I/O module 111-112
Operation is resetted, I/O module 111 operates in standby mode (to pusher side) and I/O module 112 operates in state of a control (control side).
Then, after executing and resetting, field instrumentation 4 receives power supply, wherein I/O module 111 operate in state of a control (control side) and
I/O module 112 operates in standby mode (to pusher side).That is, after about the reset of field instrumentation 4 operation, I/O mould
The state of a control (control side) of block 111-112 and standby mode (to pusher side) switching.
If the state of a control (control side) or standby mode (to pusher side) of redundancy I/O module 111-112 are switched to standby respectively
State (to pusher side) or state of a control (control side), then can be recorded as that failure has occurred in I/O module 111-112 in the factory
Or it is abnormal, failure/exception of I/O module 111-112 can be notified to operator.However it can not identify recorded I/O module
Failure/exception reason of 111-112, be based on field instrumentation 4 reset operation or I/O module 111-112 failure/
It is abnormal, etc..
Therefore, operator can not handle rapidly failure/exception of I/O module 111-112.As a result, needing to carry out about I/O
Failure/exception reason of module 111-112 identifies operation, or for the replacement operation of I/O module 111-112, this makes to grasp
The work of work person becomes complicated.
In consideration of it, inhibiting redundancy I/O module 111-112 the purpose of the present invention is after about the reset of field instrumentation 4 operation
Switching from operating status to wait state or from wait state to operating status.
Solution to problem:
(general open) in order to overcome these disadvantages, one aspect of the present invention provides a kind of control device.Control device can
To be communicated via multiple input/output modules with the field instrumentation of installation in the factory.Control device can make it is multiple input/it is defeated
One in two in module runs out and another is waited, to form input/output module redundancy.Control device can wrap
Include the storage unit of storage operational administrative information.Control device may include application execution unit, which sends
Suspend the signal powered to field instrumentation.Control device may include reset unit, which is based on the signal and sends temporarily
Stop the instruction powered from input/output module.Based on the reception to above-mentioned signal, reset unit can store or update storage
The slave mode of input/output module in operational administrative information.
Operational administrative information may include redundant input/output module in operation or in the state of waiting.Operational administrative information can
To include at the time of sending the instruction of pause power supply, input/output module is in operation or in the state of waiting.
Operational administrative information can include at least following one: at the time of sending the instruction of pause power supply, input/output module
In operation or in the state of waiting；Or pause is being executed to scene from the human interface station connecting by network with control device
At the time of the operation of instrument power supply, input/output module is in operation or in the state of waiting.
When receiving the instruction of pause power supply, redundant input/output module can suspend after by preset time from defeated
Enter/output module in be currently running input/output module power supply.
Control device may include application execution unit, which issues the signal for continuing to power to field instrumentation.
Control device may include reset unit, the reset unit based on the signal for restoring electricity, send for continue from input/
The instruction of output module power supply.Control device may include activation unit, which is sent out based on have passed through preset time
The instruction for continuing to power from input/output module is sent, should suspend in the preset time and power from input/output module.
When receiving continuation from the instruction that input/output module is powered from activation unit, it is based on operational administrative information, redundancy is defeated
Enter/output module can continue from input/output module to power in the input/output module of operation.
Input/output module can have control device, the control device by the state of input/output module in operating status and
It is switched between wait state.Based on the input/output mould switched between operating status and wait state by control device
The state of block is stored or is updated storage on the memory for be supplied to input/output module in operational administrative information and indicated
Input/output module is in operating status or the information of wait state.
In order to overcome these disadvantages, another aspect provides a kind of control methods.Control method can be filled by control
Execution is set, the control device is as follows: in the factory for being equipped with field instrumentation；And has and pass through multiple input/output moulds
Block communicates with field instrumentation and stores the storage unit of operational administrative information.Control method can make multiple input/output modules
In two in one operation and another wait, to form input/output module redundancy.The control method may include
Send the signal that pause is powered to field instrumentation.The control method may include that pause is sent based on the signal from input/output
The instruction of module for power supply.The control method may include sending based on have passed through the predetermined time and continuing to supply from input/output module
The instruction of electricity should suspend within the predetermined time and power from input/output module.The control method may include based on to after
The reception of continuous instruction stores or updates storage the slave mode of the input/output module in operational administrative information.
In order to overcome these disadvantages, it is yet another aspect of the present invention to provide a kind of programs.Controlling program can be by control device
Computer executes, and the control device is as follows: in the factory for being equipped with field instrumentation；And have by it is multiple input/it is defeated
Module communicates with field instrumentation and stores the storage unit of operational administrative information out.Control program can make multiple input/output
An operation and another waiting in two in module, to form input/output module redundancy.The program can make to count
Calculation machine sends the signal that pause is powered to field instrumentation.The program can make computer be based on the signal send pause from input/
The instruction of output module power supply.The program can make computer and indicate to continue from input/output based on have passed through the predetermined time
Module for power supply should suspend in the preset time and power from input/output module.The program can make computer be based on to after
The reception of continuous instruction is to store or update the slave mode at the input/output module in operational administrative information.
In addition, foregoing invention content do not enumerate it is of the invention all may feature, the sub-portfolio of the feature group also has can
Invention can be constituted.
Detailed description of the invention
Fig. 1 is the structure chart for showing the topology example of the control device in conventional security instrument system.
Fig. 2 is to show the structure chart of the topology example of the control device in safety instrumented systems of the invention.
Fig. 3 is the structure chart for illustrating to indicate an example of the invention.
Fig. 4 is the basic block diagram for illustrating to indicate an example of traditional Process Control System.
Fig. 5 is the flow chart for showing an example of the operation of pause from I/O module for power supply of the invention.
Fig. 6 is to show the flow chart for restoring an example from the operation of I/O module for power supply of the invention.
Specific embodiment
Below by way of invention embodiment, the present invention will be described, but following implementation is not to involved by claims
Invention be defined.Also, the feature combination illustrated in embodiment is not all essential features of the invention yet.
<topology example of the control device in safety instrumented systems>
Hereinafter, the detailed description of the control device in safety instrumented systems according to the present invention has been given with reference to the accompanying drawings.Fig. 2
It is for illustrating basic block diagram of the invention, part identical with the corresponding portion in Fig. 1 is presented with like reference characters.
In Fig. 2, control device 100 is consisted of the following parts: security control unit, by power module 141/142, processor die
The live instrument that block 131/132, I/O module 111-116, communication bus module 121/122 are connected with by I/O module 111-116
Device 4 is constituted；First security node unit, by power module 231/232, I/O module 211-218, communication bus module 221/222
The field instrumentation (not shown) connected with by I/O module 211-218 is constituted；Second security node unit, by power module
331/332, the field instrumentation that I/O module 311-318, communication bus module 321/322 are connected with by I/O module 311-318
(not shown) is constituted.Security control unit and these security node units pass through such as Vnet/IP (registered trademark) shown in FIG. 1
It is connect Deng network 7 is controlled with human interface station 5 and engineering terminal 6, wherein they pass through communication bus module 121/122,221/
222 and 321/322, I/O module 111-116,211-218 and 311-318 etc. are connect with field instrumentation 4.In addition, constituting control dress
Set 100 power module 141/142,231/232 and 331/332, processor module 131/132, I/O module 111-116,211-
Modules in 218 and 311-318 and communication bus module 121/122,221/222 and 321/322 can have redundancy
Structure, two of them module form a pair of of module, a module be in state of a control (control side) and another module be in
Machine state (to pusher side).
Field instrumentation 4 is, for example, the sensor apparatus such as flowmeter or temperature sensor, such as flow control valve or close/open valve
Equal valves instrument, the actuators instrument such as fan or motor, or it is mounted on the other instruments of factory site.
Human interface station 5 is, for example, the device for being operated by plant operator and being used to monitor process.In addition, for example can be with
Measuring instrument Figure 50 1/502 is shown on human interface station 5, allows to execute pause or is continued to the power supply of field instrumentation 4
Operation.Engineering terminal 6 is the device for creating the program to be executed by control device 100.
In the present invention, it realizes and inhibits due to executing a series of reset operations and in redundancy I/O at processor module 131/132
State of a control (control side) at module 111-112 and the switching between standby mode (to pusher side), are grasped in this series of reset
In work, continue to power after redundancy I/O module for power supply in pause, be returned to just so that field instrumentation 4 issues state from alarm
Normal state (state not sounded an alarm).In addition, although being described in this example about being in as one of redundant module
The state of a control (control side) of I/O module in the processor module 131 of state of a control (control side) is (standby with standby mode
Side) between the switching of switching inhibit function 8, but it is (standby about the state of a control of I/O module (control side) and standby mode
Side) between the similar switching of switching inhibit function (not shown) also to may be mounted to be in as another in redundant module
In the processor module 132 of standby mode (to pusher side).
<switching of the switching of the slave mode about I/O module inhibits the topology example of function>
Next, state of a control (the control about the I/O module configured in processor module 131 is described in detail using Fig. 3
Side) and standby mode (to pusher side) between the switching of switching inhibit function 8, processor module 131 therein is peace shown in Fig. 2
The constituent element of control device 100 in full instrument system.Fig. 3 is for illustrating to make about in control device 100 of the invention
The switching of the switching of the slave mode (operation/waiting) of I/O module in an example of processor module 131 inhibits function 8
Structure chart.
Switching suppression about the switching between the state of a control (control side) and standby mode (to pusher side) of I/O module of the invention
Function 8 processed is made of application execution unit 81, storage unit 82, reset unit 83, diagnosis unit 84 and module activation unit 85.
In addition, in Fig. 3, further it is shown that the I/O module 111-112 that is connect with processor module 131 and via I/O module 111-
The field instrumentation 401-416 of 112 connections.
Storage unit 82 can be disposed on the storage unit in memory or exterior storage medium.
Application execution unit 81 executes the programs such as the control program downloaded, and via I/O module 111-112 from field instrumentation
401-416 collects the data such as measured value.Measured value from field instrumentation 401-416 includes process values.Application execution list
Member 81 executes calculating to the data of collection based on scheduled control program, sends driving signal in field instrumentation 401-416
Other instruments, and control control target process.
Here, the programs such as the control program downloaded include application logic.Application logic is created by engineering terminal 6
It builds, and is stored in storage unit 82 as program.Using graphic user interface with Function Block Diagram (Functional Block
Diagram, FBD) the description application logic such as format.
In addition, the storage unit 82 of storage application logic can be database, memory or have been not shown and single with storage
First 82 different exterior storage mediums.
It is operated if inputted at human interface station 5 about the reset of field instrumentation 401-416, (it is thin by functional block 811-812
Section is described below) it receives via control network 7 about the instruction for resetting operation.
In addition, functional block 811-812 is used to indicate temporarily to the transmission of reset unit 83 when receiving the instruction for resetting operation
Stop the signal powered from I/O module 111-112.
Prepare a functional block in application execution unit 81 for each of field instrumentation 401-416.
In addition, functional block 811-812 includes counter (not shown), suspending to after field instrumentation 401-416 power supply, the meter
The time (resetting time) powered to field instrumentation 401-416 should be started again at after number device timing.
After completing to the timing of resetting time, which sends resetting time to reset unit 83 and is over and controlled
The instruction that state should be restored from uncontrolled state (details is described below).
Storage unit 82 stores wherein: with the above-mentioned application logic of the descriptions such as functional block 811-812 chart format；Below
The operational administrative information that will be mentioned, wherein having recorded the state of a control (control side) or standby as redundancy I/O module 111-112
The slave mode of state (to pusher side)；Diagnose by diagnosis unit 84 connecting about with field instrumentation 401-416 of obtaining
The diagnostic result of the I/O module 111-112 connect whether normal operation, such as be not turned off or there is no failure, etc..
In addition, storage unit 82 can store the process values measured by field instrumentation 401-416.Storage unit 82 can be storage
Device or exterior storage medium.
Based on closing the power supply from field instrumentation 401-416 from the received instruction of functional block 811-812, reset unit 83 is to I/
O module 111-112 is sent so that I/O module 111-112 is transformed into the instruction of uncontrolled state from slave mode, to suspend pair
Field instrumentation 401-416 power supply.
In addition, if powering from I/O module 111-112 and in order to suspend to I/O module 111-112 transmission so that I/O module
111-112 is transformed into the instruction of uncontrolled state from slave mode, then reset unit 83 is supplied in pause to field instrumentation 401-416
The state of a control (control side) or standby mode (to pusher side) of confirmation a pair of I/O module 111-112, believes in operational administrative before electricity
It is stored in breath and updates confirmation result.At this point, about a pair of of redundancy I/O module 111-112 state of a control (control side) or to
Machine state (to pusher side), the confirmation of diagnosis unit 84 setting when obtaining measured value from field instrumentation 401-416 being mentioned below
To the state of a control (control side) or standby mode (to pusher side) of I/O module 111-112, determined by each of these
Instruction I/O module is in state of a control (control side) or the information of standby mode (to pusher side) is stored in operational administrative information simultaneously
It is updated.
In addition, then resetting list provided that the counter (not shown) to functional block 811-812 completes timing to resetting time
Member 83 issues the instruction that make I/O module 111-112 be restored to slave mode from uncontrolled state, to continue from I/O mould
Block 111-112 powers to field instrumentation 401-416.
Here, an example of operational administrative information is as shown in Figure 4.Operational administrative information includes the slave mode of I/O module 111-112
(operation/waiting) 41 and by reset unit 83 be based on reset operation suspension from I/O module 111-112 power supply before as control
The slave mode 42 of state (control side) processed or standby mode (to pusher side).
Suspend before I/O module 111-112 power supply as state of a control (control side) or standby mode (to pusher side) by
Control state 42 can include at least the shape in the predetermined instant when the instruction of pause power supply is sent to I/O module 111-112
State, or in when the state for executing predetermined instant when resetting operation to field instrumentation 401-416 by human interface station 5.
In addition, in Fig. 4, although the state of a control (control side) and standby mode (to pusher side) of I/O module 111-112 are expressed
It is that very (TRUE) and false (FALSE) can also be represented as but as long as this instruction can distinguish operating status and wait state
Such as " being currently running "/" waiting ", o/x etc..
If obtaining measured value from field instrumentation 401-416, the confirmation of diagnosis unit 84 is stored in the I/O module being mentioned below
The state of a control (control side) or standby mode of redundancy I/O module 111-112 on the memory of 111-112 (to pusher side).So
Afterwards, after state of a control (control side) or standby mode (to pusher side) are confirmed at I/O module 111-112, it will confirm that result is made
Storage is recorded in for the slave mode in state of a control (control side) or the I/O module 111-112 of standby mode (to pusher side)
In operational administrative information in storage unit 82.
It (is controlled at the time of obtaining measured value from field instrumentation 401-416 with the state of a control of confirmation redundancy I/O module 111-112
Side) or standby mode (to pusher side) at the time of can be set by the user.
In addition, whether run in the case where no exception about I/O module 111-112, such as, if operated disconnection or
Reset operation, if without failure/exception etc., diagnosis unit 84, which diagnoses, to be had been subjected to turning from slave mode to uncontrolled state
The I/O module 111-112 changed supplies to suspend to power or suspend to unshowned to field instrumentation 401-416 to field instrumentation
The I/O module for power supply of electricity.At this point, the diagnostic result about I/O module is stored in storage unit 82 by diagnosis unit 84.
Here, if diagnosis unit 84 is diagnosed to be I/O module 111-112 and is in abnormality, such as the control due to redundancy I/O
Switching between state (control side) and standby mode (to pusher side) is broken down, such as: it disconnects, execute to reset and operate, it can be with
Alarm is shown to indicate the operation exception of I/O module 111-112 by human interface station 5.
Failure/exception of I/O module 111-112 can be recorded as in storage unit 82.
Based on the diagnostic result about slave mode (state of a control (control side) or standby mode (to pusher side)), it is being supplied to function
At the time of the counter completion timing resetting time of energy block 811-812 and in the operational administrative information being stored in storage unit 82
Before at the time of middle pause is powered from I/O module 111-112, no matter whether I/O module 111-112 is extensive from uncontrolled state
Slave mode etc. is arrived again, and module activation unit 85 indicates that I/O module 111-112 continues to power to field instrumentation 401-416
(that is, powering on).
It is mentioned in addition, module activation unit 85 periodically confirms to be stored in storage unit 82 in predetermined time by diagnosis unit 84
For and indicate the diagnostic result whether I/O module 111-112 can run in the case where without exception, such as, if executed
Disconnect or reset operation, if there are failure/exceptions etc..
Module activation unit 85 periodically confirms can be set by the user at the time of the diagnostic result provided by diagnosis unit 84.
Each of I/O module 111-112 has multiple channels, especially 16ch (channel), and field instrumentation 401-416
In one may be coupled to each channel.If I/O module 111-112 is configured as redundant module, redundancy I/O module
Each of 111-112 is connected to each of field instrumentation 401-416 at a channel.At this point, redundancy I/O module
111-112 also have storage as the memory of state of a control (control side) or the slave mode of standby mode (to pusher side) (not
Show) so that themselves can be confirmed which of they are in which kind of state, state of a control (control side) or standby shape
State (to pusher side).
In the example being used in the present invention, although I/O module 111-112 is described for the module of simulation input, I/O
Module 111-112 can be the module for simulation input/output (AI, AO) or the module of numeral input/output (DI, DO).
In addition, redundancy I/O module 111-112 can be with storage as state of a control (control side) or standby mode (to pusher side)
The external memory of slave mode connects, so that themselves may determine which of they are in state of a control (control side)
Or standby mode (to pusher side).
In addition, I/O module 111-112 includes counter (timer) (not shown), receiving from reset unit 83
It is started counting when instruction, to suspend the power supply from I/O module.If be in standby a module (to pusher side) enter it is non-
Slave mode (state that redundancy I/O module 111-112 cannot be controlled by control device), then the counter starts counting, if
Confirmation has already been through preset time, then I/O module 111-112 control device (not shown) can be by making in state of a control
Another module of (control side) suspends the power supply to field instrumentation 401-416 from running state conversion to uncontrolled state.
Be in standby in redundancy I/O module 111-112 as a result, a module (to pusher side) be based on reset signal enter it is non-
Slave mode, and after a preset time lapses, another module in state of a control (control side) is undergone to uncontrolled shape
The conversion of state is powered so as to suspend to field instrumentation 401-416.
In addition, provided that the counter to functional block 811-812 completes counting to preset reset time, then based on resetting
State of a control (control side) or standby mode (to pusher side) before operation at redundancy I/O module 111-112 restore I/O module
The slave mode of 111-112.Then, I/O module 111-112 is transported under state of a control (control side) or standby mode (to pusher side)
Row.It is restored to slave mode based on I/O module 111-112, I/O module 111-112 can continue to supply to field instrumentation 401-416
Electricity.
<operation based on reset signal>
If operator control redundancy I/O module 111-112 with execute about field instrumentation 401-416 reset operation, so as to
The state for sounding an alarm field instrumentation 401-416 from holding is transformed into normal condition (state not sounded an alarm), the present invention
Safety instrumented systems in control device although after a reset also can be as before resetting in state of a control (control side)
Or I/O module 111-112 is operated under standby mode (to pusher side), the state of a control (control without switching I/O module 111-112
Side) or standby mode (to pusher side).It is illustrated referring to Fig. 5 to Fig. 6 and executes reset about the operator of field instrumentation 401-416
Operation and the method resetted.
(suspending the operation from I/O module for power supply)
Fig. 5 shows the flow chart of an example of the control device in safety instrumented systems according to the present invention, and wherein operator is controlled
I/O module 111-112 processed is executed to be operated about the reset of field instrumentation 401-416, and input passes through control I/O module 111-112
Come suspend to field instrumentation 401-416 power instruction, I/O module 111-112 undergo from slave mode to uncontrolled state
Conversion is powered to suspend from I/O module 111-112.
Firstly, operator is by the confirmation of human interface station 5 according to the field instrumentation 401-416 for being mounted on factory in step S501
The alarm that shows of signal, and after confirming factory safety, press be shown on human interface station 5 and for execute correspond to it is existing
Reset button 501/502 (step S501) on measuring instrument Figure 50 1/502 of the reset of field instrument 401-416.If pressed
The signal that instruction executes the reset operation about field instrumentation 401-416 is then sent to via control network by reset button
The functional block 811-812 run in application execution unit 81.
In step S501, human interface station 5 can be stored at the time of pressing the reset button of field instrumentation 401-416
The I/O module as state of a control (control side) or standby mode (standby) is recorded in operational administrative information in storage unit 82
The slave mode of 111-112.
Next, indicating to execute the reset about field instrumentation 401-416 when receiving from human interface station 5 in step S502
When the signal of operation, functional block 811-812 sends signal to reset unit 83, and instruction suspends from company, field instrumentation 401-416 institute
The I/O module 111-112 connect powers (step S502) to the field instrumentation 401-416 being reset.
In step S503, reset unit 83 confirms the I/O module 111- in the operational administrative information being stored in storage unit 82
112 state of a control (control side) or standby mode (to pusher side), and at the scene instrument 401-416 at before reset by operation pipe
The state of a control (control side) or standby mode (to pusher side) of I/O module 111-112 in reason information is updated to slave mode, should
Slave mode is state of a control (control side) or standby mode (to pusher side) (step of the pause before I/O module 111-112 power supply
Rapid S503).
In addition, if having updated conduct in operational administrative information before resetting at instrument 401-416 at the scene in step S503
The slave mode of the I/O module 111-112 of state of a control (control side) or standby mode (to pusher side), then be used as pause from I/O
Under the slave mode of state of a control (control side) or standby mode (to pusher side) before module 111-112 power supply at least can be
One of state: the state of the predetermined instant when the instruction of pause power supply is transferred to I/O module 111-112；Or when by man-machine
Interface Station 5 executes the state of predetermined instant when resetting operation to field instrumentation 401-416.
In step S503, the I/ as state of a control (control side) or standby mode (to pusher side) is recorded in operational administrative information
The slave mode of O module 111-112 is the redundancy I/ for being connected to diagnosis unit 84 based on the diagnostic result about slave mode
The state of a control (control side) or standby mode (to pusher side) of O module 111-112, diagnosis unit 84 therein is periodically to it
Diagnosed.
In step S504, reset unit 83 is transformed into I/O module 111-112 from slave mode to I/O module 111-112 transmission
The instruction of uncontrolled state powers (step S504) to suspend to field instrumentation 401-416.
Next, in step S505, receive make I/O module 111-112 from slave mode be transformed into uncontrolled state so as to
When suspending the instruction powered to field instrumentation 401-416, each of redundancy I/O module 111-112 confirms the control of its own
State (control side) processed or standby mode (to pusher side) (step S505).At this point, each of I/O module 111-112 basis
Which of validation of information redundant module about slave mode is in state of a control (control side) or standby mode is (standby
Side), wherein above-mentioned slave mode is the control shape recorded in the memory for being supplied to each of I/O module 111-112
State (control side) or standby mode (to pusher side).
In addition, in step S506, the state of a control (control based on each of the I/O module 111-112 confirmed in step S505
Side processed) or standby mode (to pusher side), the I/O module of the received instruction for making I/O module 111-112 enter uncontrolled state
Each of 111-112 judges that each of redundant module is to be located at operation side or be located to wait side, that is, judges them
It is in operating status or wait state (step S506).
In step S507, if determining that one in I/O module is located at waiting side, the control of I/O module in step S506
Device (not shown) makes to be located at based on the instruction from reset unit 83 waits the I/O module of side to be transformed into uncontrolled state, with
I/O module 111-112 is set to be transformed into uncontrolled state (step S507) from slave mode.
Make to be located in step s 507 and wait I/O module the reason of being transformed into uncontrolled state of side to be, if in order to suspend from
Positioned at operation side I/O module for power supply and cause to be transformed into uncontrolled state, such as explained in the background section, then I/
The state of O module 111-112 can be switched to operation side or wait side, and due to the switching of operation side or waiting side, can store
Indicate the information that I/O module 111-112 breaks down.
Here, uncontrolled state refers to the state (off-line state) that redundancy I/O module 111-112 cannot be controlled by control device,
For example, not can control the state powered to field instrumentation 401-416.
In step S508, if determining that one in I/O module is located at operation side in step S506, the I/O module
Even if control device (not shown) receives the instruction from reset unit 83 so that I/O module 111-112 enters uncontrolled shape
State still maintains to suspend from its power supply from the I/O module for power supply (step S508) for being located at operation side.
In addition, activation is supplied to the I/O module if maintaining the power supply for being located at the I/O module of operation side in step S508
111 or 112 counter simultaneously starts counting.
In step S509, I/O module 111-112 control device (not shown) will be counted by the counter of I/O module 111-112
Time be compared with preset time, should maintain within a preset time be located at operation side module power supply (step S509).
At this point it is possible to which the preset time for the power supply for being located at operation side should be maintained by user setting.Additionally, it should maintain to be located at fortune
The preset time of the power supply of row side can store in the memory for being supplied to I/O module 111-112.
In step S510, if being judged as that by the time of counter instruction be more than preset time, I/O in step S509
Module 111-112 control device (not shown) makes the module for being located at operation side be transformed into uncontrolled state from slave mode, so as to
Suspend from the module for power supply (step S510) for being located at operation side.
At this point, making slave mode be transformed into uncontrolled state to suspend to live instrument if redundancy I/O module 111-112 is received
The instruction of device 401-416 power supply, then be located at and the module of side waited to initially enter uncontrolled state, after a predetermined time elapses, position
Module in operation side enters uncontrolled state.That is, power if to suspend to field instrumentation 401-416, redundancy
I/O module 111-112 enters uncontrolled state.
In addition, by the instruction for sending pause power supply from reset unit 83 to I/O module 111-112 in step S510, by mentioning
The counter of functions of physical supply block 811-812 starts counting the preset time that should suspend power supply.
Suspending can be preset to the time that field instrumentation 401-416 powers by user.
In step S511, preset time is not above by the time of counter instruction if be judged as in step S509,
I/O module 111-112 control device (not shown) will remain operational the I/O module of side, to maintain (step of powering from it
S511)。
Operation in this way answers field instrumentation with executing if controlling I/O module 111-112 by human interface station 5
Bit manipulation then suspends from the conduct state of a control (control side) or standby mode before I/O module 111-112 power supply (to pusher side)
Slave mode can be stored in operational administrative information and based on (standby as state of a control (control side) or standby mode
Side) slave mode be updated, the moment is at least following one: the instruction for suspending power supply is sent to I/O module 111-
Predetermined instant when 112；And predetermined instant when resetting operation is executed to field instrumentation 401-416 at human interface station 5.
Therefore, control device 100 can store before executing reset operation to field instrumentation 401-416 at I/O module 111-112
As state of a control (control side) or the slave mode of standby mode (to pusher side).
It powers to field instrumentation 401-416 without cutting I/O module 111-112 in addition, I/O module 111-112 can suspend
Change to state of a control (control side) or standby mode (to pusher side).
If operator is to appointing in each field instrumentation 401-416 in each channel for being connected to I/O module 111-112
What execution resets operation, then is connected to all field instrumentation (not shown) in each channel of I/O module 111-112
To be reset.
It is uncontrolled that the operation of I/O module for power supply (continue from) Fig. 6 is that input is transformed into I/O module 111-112 from slave mode
The instruction of state is powered to suspend to field instrumentation 401-416 shown in fig. 5, and is supplied in pause to field instrumentation 401-416
The flow chart to restore electricity after elapse of a predetermined time after electricity.
Firstly, in step s 601, functional block 811-812 is with being supplied to the counter confirmation of I/O module 111-112 from I/O
Whether the power supply of module 111-112 have passed through the predetermined time after having entered halted state.If it is confirmed that predetermined to have had been subjected to
Time will then indicate that have passed through the signal of predetermined time after I/O module 111-112 power supply in pause is sent to reset unit
83, and processing is made to proceed to step S602 (step S601).
In step S602, reset unit 83 to I/O module 111-112 transmission make uncontrolled state be restored to slave mode so as to
Continue the instruction (step S602) powered to field instrumentation 401-416.At this point, if diagnosis unit 84 is to I/O module 111-112
It is diagnosed, I/O module 111-112 is recovered or cannot be restored to operating status or wait state from uncontrolled state
(slave mode) will then indicate that they are recovered or cannot be restored to the information of operating status or wait state (slave mode)
It is stored in storage unit 82 as diagnostic result.
In step S603, module activation unit 85 periodically confirms to be stored in storage unit 82 to be provided by diagnosis unit 84
The diagnostic result about I/O module 111-112, such as about whether have been carried out reset operation and they be not at it is non-by
Control state or with the presence or absence of abnormal diagnostic result, for example, with the presence or absence of failure/exception grade (step S603).
In step s 604, module activation unit 85 is used as according to the operational administrative validation of information being stored in storage unit 82
Suspend the slave mode (step from state of a control (control side) or standby mode (to pusher side) before I/O module 111-112 power supply
Rapid S604).
Next, in step s 605, module activation unit 85 in step S603 and step S604 based on confirming by diagnosing
Unit 84 provides and is stored in the diagnostic result about I/O module 111-112 in storage unit 82, and issuing instruction makes I/O mould
Block 111-112 is restored to slave mode from uncontrolled state to continue the signal powered to field instrumentation 401-416.For example,
Diagnostic result can be obtained by periodic diagnosis, about whether to I/O module 111-112 execute reset operation and they not
In uncontrolled state or with the presence or absence of exception, for example, slave mode is in operational administrative with the presence or absence of failure/exception etc.
Suspend in information from the state of a control (control side) or standby mode (to pusher side) (step before I/O module 111-112 power supply
S605)。
In addition, in step s 605, diagnostic result of the module activation unit 85 based on instruction about the judgement of normality, sending refers to
Showing makes I/O module 111-112 be restored to slave mode from uncontrolled state to continue the letter powered to field instrumentation 401-416
Number, for example, the diagnostic result indicates that reset unit 83 is sent to I/O module 111-112 so that from uncontrolled in step S602
State is restored to the instruction of slave mode and is stored etc..
In addition, being restored to slave mode from uncontrolled state based on the instruction from module activation unit 85 in step S606
To continue the signal powered from I/O module 111-112, I/O module 111-112 control device (not shown) is based on being stored in
Operational administrative information on storage unit 82 judges which of each redundant module is to be located at the module of operation side or be located at etc.
Module (step S606) to side.The storage unit that I/O module 111-112 can have storage operational administrative information (is not shown
Out).
In step S607, if being judged as that I/O module is located at operation side, I/O module 111-112 control in step S606
Device (not shown) makes a module be restored to slave mode from uncontrolled state, and makes its work in operation side, so as to multiple
Continue before position from the I/O module for power supply (step S607) for being located at operation side.
In step S608, if being judged as that I/O module is located in step S606 waits side, I/O module 111-112 control
Device (not shown), which makes to be located at, waits the I/O module of side to be maintained under uncontrolled state, and activates and be supplied to I/O module 111-
112 counter.
In step S608, I/O module 111-112 control device (not shown) will be by being supplied to I/O module 111-112's
The time that counter counts is compared with preset time, and in the preset time, the I/O mould for waiting side is located at before reset
Block should be maintained at uncontrolled state (step S608).
The preset time that I/O module before reset positioned at waiting side should be maintained at non-controlled state, which is stored in, is supplied to I/
In the memory (not shown) of O module 111-112.
Wait the I/O module of side that should be maintained at non-controlled state furthermore it is possible to be located at before reset by user setting
Preset time.
In step S609, if being judged as the meter completed by the time that counter counts to preset time in step S608
It is restored to slave mode (step S609) from uncontrolled state then as the I/O module for waiting side is located at by number.
In step S610, if be judged as in step S608 by be supplied to I/O module 111-112 counter indicate when
Between not yet complete counting to preset time, then be located at before reset and the I/O module of side waited to be maintained at uncontrolled state (step
Rapid S610).
Operation in this way, human interface station 5, which executes, operates the reset of field instrumentation 401-416 so that even if suspend to
Field instrumentation 401-416 power supply, I/O module 111-112 also maintain slave mode, the i.e. state of a control before resetting operation
(control side) or standby mode (to pusher side), and can continue to power to field instrumentation 401-416.
In addition, waiting side by making a module for being located at waiting side before reset be used as to be located at after by preset time
Module be restored to slave mode from uncontrolled state, I/O module 111-112 itself may determine that redundancy I/O module 111-112
Which of be located at operation side or wait side, it can judge their in operating status or wait states.
Although describing the power supply to field instrumentation 401-416 in this example by being in control in redundancy I/O module 111-112
A module under state (control side) executes, but two moulds in state of a control (control side) or standby mode (to pusher side)
Block can power to field instrumentation 401-416.
In this way, the control device according to the present embodiment includes the storage unit for storing operational administrative information；Using
Execution unit sends the signal that pause is powered to field instrumentation；And reset unit, it is sent and is suspended from defeated based on above-mentioned signal
Enter/output module power supply instruction.
It utilizes such structure, is operated even if carrying out reset to field instrumentation 4 by human interface station 5, safety of the present invention
Control device in instrument system can also make I/O module 111-112 maintain control shape as before resetting operation
State (control side) or standby mode (to pusher side).Therefore, it is possible to reduce failure about I/O module 111-112 it is non-essential
Notice, so that the operator of factory, surfaceman etc. can cope with rapidly the failure of I/O module 111-112.
More than, it is illustrated using embodiments of the present invention, but technical scope of the invention is not limited to above embodiment
Documented range.In addition, it will be apparent to those skilled in the art that can be increased on the basis of the above embodiment various
Changes and modifications.In addition, by the record of claim it is found that this embodiment for being subject to changes and modifications is also contained in this hair
In bright technical scope.It should be noted that claims, specification and device shown in the drawings, system, program and
Each processing such as movement, sequence, step and stage in method execute sequence, as long as no especially express " earlier ", it is " early
In " etc., as long as the output of previous processed be not used in subsequent processing, can be realized with random order.About power
Motion flow in sharp claim, specification and attached drawing, use for convenience " first ", " then " etc. be illustrated,
But it is not meant to implement in this order.
As described above, the embodiment of the present invention can be used for realizing a kind of control device: passing through multiple input/output modules and installation
Field instrumentation communication in the factory；Also, one in two in multiple input/output modules is made to run and another
It waits, to form input/output module redundancy, which includes: the storage unit for storing operational administrative information；Using
Execution unit sends the signal that pause is powered to field instrumentation；And reset unit, be based on the signal, send pause from input/
The instruction of output module power supply, wherein reception signal-based, reset unit are stored or updated storage in operational administrative information
Input/output module slave mode, allow control device rest in pause from input/output module power supply before it is defeated
Enter/output module is in state of a control (control side) or standby mode (to pusher side), so as to inhibit redundant input/output mould
Switching of the block between state of a control (control side) and standby mode (to pusher side).
Description of symbols
1,100: control device；4,401-416: field instrumentation；5: human interface station；6: engineering terminal；7: control network；8: fortune
The switching of row state inhibits function；81: application execution unit；82: storage unit；83: reset unit；84: diagnosis unit；85: mould
Activation of block unit.
Claims (9)
1. a kind of control device is communicated by multiple input/output modules with the field instrumentation of installation in the factory；And make
One obtained in two in the multiple input/output module runs and another waiting, to form input/output module
Redundancy, the control device include:
Store the storage unit of operational administrative information；
Application execution unit, the signal powered for sending pause to the field instrumentation；And
Reset unit sends the instruction that pause is powered from the input/output module based on the signal；
Wherein, based on the reception to the signal, the reset unit is stored or is updated storage in the operational administrative information
The input/output module slave mode.
2. control device according to claim 1, wherein the operational administrative information includes: the redundant input/output
Module is in operation or in the state of waiting；And at the time of sending the described instruction of pause power supply, the input/output module
In operation or in the state of waiting.
3. control device according to claim 1 or 2, wherein the operational administrative information includes at least one of following:
At the time of sending the described instruction of pause power supply, the input/output module is in operation or in the state of waiting；Or
The behaviour that pause is powered to the field instrumentation is being executed from the human interface station being connect by network with the control device
At the time of work, the input/output module is in operation or in the state of waiting.
4. control device according to any one of claim 1 to 3, wherein in the described instruction for receiving pause power supply
When, redundant input/output module pause after by preset time is currently running from the input/output module
Input/output module power supply.
5. control device according to any one of claim 1 to 4, including:
Application execution unit sends the signal for continuing to power to the field instrumentation；
Reset unit sends the instruction for continuing to power from the input/output module based on the signal for continuing power supply；With
And
Unit being activated, the instruction for continuing to power from the input/output module is sent based on have passed through preset time, described
It should suspend in preset time and power from the input/output module.
6. control device according to claim 5, wherein from the activation unit receive continuation from it is described input/
When the described instruction of output module power supply, it is based on the operational administrative information, the redundant input/output module continues from described
It powers in the input/output module of operation in input/output module.
7. control device according to any one of claim 1 to 6, in which:
The input/output module has control device, and the control device switches institute between operating status and wait state
State the state of input/output module；
The shape based on the input/output module switched between operating status and wait state by the control device
State is stored or is updated storage on the memory for being supplied to the input/output module and referred in the operational administrative information
Show that the input/output module is in operating status or the information of wait state.
8. a kind of control method executed by control device, wherein the control device is located at the factory for being equipped with field instrumentation
In；And there is storage unit, the storage unit is communicated and stored with the field instrumentation by multiple input/output modules
Operational administrative information；
The control method is used to make an operation in two in the multiple input/output module and another is waited,
To form input/output module redundancy, which comprises
It sends for suspending the signal powered to the field instrumentation；
The instruction that pause is powered from the input/output module is sent based on the signal；
Based on have passed through preset time, the instruction for continuing to power from the input/output module is sent, in the preset time
It should suspend and power from the input/output module；And
Based on the reception of the instruction to the continuation, store or update storage the input in the operational administrative information/
The slave mode of output module.
9. a kind of control program that the computer by control device executes, the control device are located at the work for being equipped with field instrumentation
In factory；And there is storage unit, the storage unit is communicated and deposited with the field instrumentation by multiple input/output modules
Store up operational administrative information；
The control program makes an operation in two in the multiple input/output module and another is waited, thus
Input/output module redundancy is formed, described program executes the computer:
It sends for suspending the signal powered to the field instrumentation；
The instruction that pause is powered from the input/output module is sent based on the signal；
Continuing to power from the input/output module based on have passed through preset time instruction, should suspend in the preset time
It powers from the input/output module；And
Based on the reception of the instruction to the continuation, the input/output of storage or update in the operational administrative information
The slave mode of module.
Applications Claiming Priority (3)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| JP2017-086225 | 2017-04-25 | ||
| JP2017086225A JP6787239B2 (en) | 2017-04-25 | 2017-04-25 | Control device, control method, and control program |
| PCT/JP2018/016679 WO2018199116A1 (en) | 2017-04-25 | 2018-04-24 | Control apparatus, control method, and program |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN110462534A true CN110462534A (en) | 2019-11-15 |
| CN110462534B CN110462534B (en) | 2022-05-10 |
Family
ID=62386882
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201880020702.2A Active CN110462534B (en) | 2017-04-25 | 2018-04-24 | Control device, control method, and program |
Country Status (5)
| Country | Link |
|---|---|
| US (1) | US11079826B2 (en) |
| EP (1) | EP3571556B1 (en) |
| JP (1) | JP6787239B2 (en) |
| CN (1) | CN110462534B (en) |
| WO (1) | WO2018199116A1 (en) |
Cited By (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN113311695A (en) * | 2021-04-26 | 2021-08-27 | 中国船舶重工集团公司第七0三研究所 | Automatic following method for control states of different control places |
Families Citing this family (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| DE102017109029A1 (en) * | 2017-04-27 | 2018-10-31 | Endress+Hauser Process Solutions Ag | Arrangement, fieldbus access unit and method for monitoring a plant of automation technology |
| US20240160175A1 (en) * | 2022-11-11 | 2024-05-16 | Rockwell Automation Technologies, Inc. | High availability redundant power module with i/o input monitoring |
Citations (18)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| EP0273322A2 (en) * | 1986-12-26 | 1988-07-06 | Kabushiki Kaisha Toshiba | A power supply with a built-in microcomputer for use in a computer system |
| CN1073272A (en) * | 1991-12-09 | 1993-06-16 | 横河电机株式会社 | Dcs |
| US6262493B1 (en) * | 1999-10-08 | 2001-07-17 | Sun Microsystems, Inc. | Providing standby power to field replaceable units for electronic systems |
| CN1536457A (en) * | 2003-04-08 | 2004-10-13 | ����-��˹â��ϵͳ�ɷ�����˾ | Vote logic block including running and maintenance overlay in remote control system |
| CN1667600A (en) * | 2004-03-12 | 2005-09-14 | 东芝解决方案株式会社 | Distributed system and redundancy control method |
| JP2006172148A (en) * | 2004-12-16 | 2006-06-29 | Hitachi High-Technologies Corp | Operation control system |
| CN1991650A (en) * | 2005-12-27 | 2007-07-04 | 株式会社东芝 | Redundant supervisory control system, and redundancy switching method of the same |
| US20070250723A1 (en) * | 2006-04-21 | 2007-10-25 | Seiji Shima | Storage apparatus and power supply control method thereof |
| JP2008108103A (en) * | 2006-10-26 | 2008-05-08 | Yokogawa Electric Corp | Duplicate current output device |
| CN102355048A (en) * | 2011-09-19 | 2012-02-15 | 河北工业大学 | Intelligent dual-power automatic transfer switch and running method |
| US20120159210A1 (en) * | 2010-12-20 | 2012-06-21 | Hitachi, Ltd. | Storage apparatus and its control method |
| CN102830666A (en) * | 2011-05-11 | 2012-12-19 | 通用电气公司 | System and method for optimizing plant operations |
| JP2012252483A (en) * | 2011-06-02 | 2012-12-20 | Yokogawa Electric Corp | I/o module and duplex system using the same |
| GB201317612D0 (en) * | 2012-10-05 | 2013-11-20 | Fisher Rosemount Systems Inc | Safety instrumental process control systems and methods |
| CN103628523A (en) * | 2008-01-24 | 2014-03-12 | 株式会社荏原制作所 | Water supply |
| CN103730951A (en) * | 2014-01-24 | 2014-04-16 | 加弘科技咨询(上海)有限公司 | Power management system and method |
| CN105579973A (en) * | 2014-01-10 | 2016-05-11 | 株式会社日立制作所 | Redundant system and method for managing redundant system |
| JP2017059115A (en) * | 2015-09-18 | 2017-03-23 | 横河電機株式会社 | Control device and control method |
Family Cites Families (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| JP3874171B2 (en) * | 2001-12-26 | 2007-01-31 | 横河電機株式会社 | Duplex communication module device |
| JP2008262426A (en) * | 2007-04-12 | 2008-10-30 | Fuji Electric Fa Components & Systems Co Ltd | Duplex controller system and controller |
| JP5594116B2 (en) * | 2010-12-15 | 2014-09-24 | 富士電機株式会社 | I / O duplex device |
-
2017
- 2017-04-25 JP JP2017086225A patent/JP6787239B2/en active Active
-
2018
- 2018-04-24 CN CN201880020702.2A patent/CN110462534B/en active Active
- 2018-04-24 WO PCT/JP2018/016679 patent/WO2018199116A1/en active Search and Examination
- 2018-04-24 EP EP18727889.0A patent/EP3571556B1/en active Active
-
2019
- 2019-08-27 US US16/551,720 patent/US11079826B2/en active Active
Patent Citations (18)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| EP0273322A2 (en) * | 1986-12-26 | 1988-07-06 | Kabushiki Kaisha Toshiba | A power supply with a built-in microcomputer for use in a computer system |
| CN1073272A (en) * | 1991-12-09 | 1993-06-16 | 横河电机株式会社 | Dcs |
| US6262493B1 (en) * | 1999-10-08 | 2001-07-17 | Sun Microsystems, Inc. | Providing standby power to field replaceable units for electronic systems |
| CN1536457A (en) * | 2003-04-08 | 2004-10-13 | ����-��˹â��ϵͳ�ɷ�����˾ | Vote logic block including running and maintenance overlay in remote control system |
| CN1667600A (en) * | 2004-03-12 | 2005-09-14 | 东芝解决方案株式会社 | Distributed system and redundancy control method |
| JP2006172148A (en) * | 2004-12-16 | 2006-06-29 | Hitachi High-Technologies Corp | Operation control system |
| CN1991650A (en) * | 2005-12-27 | 2007-07-04 | 株式会社东芝 | Redundant supervisory control system, and redundancy switching method of the same |
| US20070250723A1 (en) * | 2006-04-21 | 2007-10-25 | Seiji Shima | Storage apparatus and power supply control method thereof |
| JP2008108103A (en) * | 2006-10-26 | 2008-05-08 | Yokogawa Electric Corp | Duplicate current output device |
| CN103628523A (en) * | 2008-01-24 | 2014-03-12 | 株式会社荏原制作所 | Water supply |
| US20120159210A1 (en) * | 2010-12-20 | 2012-06-21 | Hitachi, Ltd. | Storage apparatus and its control method |
| CN102830666A (en) * | 2011-05-11 | 2012-12-19 | 通用电气公司 | System and method for optimizing plant operations |
| JP2012252483A (en) * | 2011-06-02 | 2012-12-20 | Yokogawa Electric Corp | I/o module and duplex system using the same |
| CN102355048A (en) * | 2011-09-19 | 2012-02-15 | 河北工业大学 | Intelligent dual-power automatic transfer switch and running method |
| GB201317612D0 (en) * | 2012-10-05 | 2013-11-20 | Fisher Rosemount Systems Inc | Safety instrumental process control systems and methods |
| CN105579973A (en) * | 2014-01-10 | 2016-05-11 | 株式会社日立制作所 | Redundant system and method for managing redundant system |
| CN103730951A (en) * | 2014-01-24 | 2014-04-16 | 加弘科技咨询(上海)有限公司 | Power management system and method |
| JP2017059115A (en) * | 2015-09-18 | 2017-03-23 | 横河電機株式会社 | Control device and control method |
Non-Patent Citations (3)
| Title |
|---|
| JULIAN ET AL: "OPERATING STANDBY REDUNDANT CONTROLLER TO IMPROVE VSI RELIABILITY", 《IEEE TRANSACTIONS ON INDUSTRY APPLICATIONS》 * |
| YAMASHIRO YASUHIKO: "Hardware fetures of the ProSafe-RS", 《YOKOGAWA TECHNICAL REPORT ENGLISH EDITION》 * |
| 李蒙 等: "模块无扰冗余切换技术在DCS中的实现", 《自动化仪表》 * |
Cited By (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN113311695A (en) * | 2021-04-26 | 2021-08-27 | 中国船舶重工集团公司第七0三研究所 | Automatic following method for control states of different control places |
| CN113311695B (en) * | 2021-04-26 | 2022-08-19 | 中国船舶重工集团公司第七0三研究所 | Automatic following method for control states of different control places |
Also Published As
| Publication number | Publication date |
|---|---|
| EP3571556A1 (en) | 2019-11-27 |
| EP3571556B1 (en) | 2020-05-13 |
| JP6787239B2 (en) | 2020-11-18 |
| US20190384371A1 (en) | 2019-12-19 |
| CN110462534B (en) | 2022-05-10 |
| WO2018199116A1 (en) | 2018-11-01 |
| US11079826B2 (en) | 2021-08-03 |
| JP2018185616A (en) | 2018-11-22 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN102566503B (en) | Remote monitoring and fault diagnosis system for numerical control machine tool | |
| CN110462534A (en) | Control device, control method and program | |
| JP5915627B2 (en) | Process control system | |
| CN101833298B (en) | I/O unit and industrial controller | |
| CN112527613A (en) | Equipment fault maintenance method and device based on cloud edge cooperation | |
| EP2942680B1 (en) | Process control system and process control method | |
| CN105611814B (en) | A kind of refrigeration station of data center team control control system and control method | |
| JP2014527225A (en) | Wireless monitoring and control of safety stations in processing plants | |
| JP5660082B2 (en) | Process control apparatus and system | |
| CN208587252U (en) | A kind of hydrogovernor on-line monitoring and self-diagnosable system | |
| CN112650195A (en) | Equipment fault maintenance method and device based on cloud edge cooperation | |
| CN109946603A (en) | A kind of pump on-line monitoring and fault diagnosis system | |
| CN201576199U (en) | Ship engine room monitoring and alarming system based on CAN bus | |
| JP2007087117A (en) | Data collection device | |
| CN107463133A (en) | A kind of sewage disposal device and cloud server based on high in the clouds | |
| KR20220043094A (en) | Manufacturing execution apparatus using smart bands for smart factory | |
| CN107634581A (en) | Intelligent distribution system | |
| US20060132321A1 (en) | Universal equipment process monitor | |
| CN105629858A (en) | Internet of things-based equipment online state monitoring system and method | |
| CN111830871A (en) | Equipment abnormity automatic diagnosis system | |
| CN210721064U (en) | Equipment isolation real-time online monitoring system | |
| KR102519474B1 (en) | System and method for predicting abnormal state of facilities in a building through facilities operation state analysis | |
| KR102512577B1 (en) | System and method for predicting abnormal state of facilities in a building through energy consumption analysis | |
| US10395516B2 (en) | Safety instrumented control apparatus and method thereof, and safety instrumented system | |
| JP2012208706A (en) | Redundant controller |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |